Policy
| Service
| Protocol
| Ports
| Change...
| Description
|
|---|
allow
| Ping (Echo)
| TCP
| -
| Deny
| Respond to ping
|
allow
| Secure Shell (SSH)
| TCP
| 22
| Deny
| System administration / access to the Linux shell prompt
|
allow
| Samba (File sharing)
| TCP
| 137, 138, 139, 445
| Deny
| Connect to file shares from Windows and Mac systems
|
allow
| Web/HTTP
| TCP
| 80
| Deny
| HTTP Web access (unencrypted) for client machines and sysadmins
|
allow
| Web/HTTPS
| TCP
| 443
| Deny
| Encrypted HTTPS Web access for client machines and sysadmins
|
deny
| Legacy Center/HTTP
| TCP
| 8080
| Allow
| Formerly used NoTouch Center HTTP access for clients and sysadmins
|
deny
| Legacy Center/HTTPS
| TCP
| 8443
| Allow
| Formerly used NoTouch Center encrypted HTTPS access for clients and sysadmins
|
allow
| ZeroConf
| TCP/UDP
| 5353
| Deny
| One way of client devices finding this VA automatically
|
allow
| TFTP
| TCP/UDP
| 69
| Deny
| Required for PXE boot
|
allow
| Network Block Device
| TCP
| 2001-2012
| Deny
| Required for PXE's 'Network Block Device' method
|